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Abstract. Let be a field of positive characteristic p. 

Question: Does every twisted form of fip over k occur as subgroup scheme 
of an elliptic curve over fc? 

We show that this is true for most finite fields, for local fields and for fields of 
characteristic p < 11. However, it is false in general for fields of characteristic 
p > 13, which is related to the fact that the Igusa curves are not rational in these 
characteristics. 

Moreover, we also analyse twisted forms of p-torsion subgroup schemes of 
ordinary elliptic curves and the analogous problems for supersingular curves. 

Introduction 

Let A; be a field of positive cliaracteristic p and let E be an ordinary elliptic curve 
over k. Then ker(F), the kernel of the Frobenius morphism F : E ^ E^p\ is an 
infinitesimal group scheme of length p over k, which is a twisted form of ^Up. As 
usual, /ip denotes the subgroup scheme of p.th roots of unity of Gm- 

Since twisted forms of and elliptic curves are such fundamental objects in 
algebraic geometry it is natural to ask 

Question (A). Given a field k of positive characteristic p, does every twisted form 
of fip over k occur as subgroup scheme of an elliptic curve over k? 

We will prove that this question has a positive answer in the following cases: 

Theorem. If a field of positive characteristic p is 

(i) a finite field with elements such that p < 17 or n > 2, or 

(ii) a field of the form k{{t)), or 

(iii) of characteristic p < 11, 

then Question (A) has a positive answer for this field. 

Conversely, we will prove that these results are rather sharp: 

Theorem. If a field of positive characteristic p is 

(i) a prime field Fp with p > 19, or 

(ii) of the form k{t) with p > 13 

then Question (A) has a negative answer for this field. 
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We will see that we cannot improve our results by also allowing twisted forms 
of fip on nonproper or singular curves carrying group structures. 

Although we will prove a Hasse principle for twisted forms of fip over global 
fields, we will show that there is no Hasse principle for realising twisted forms of 
lip as subgroup schemes of elliptic curves. 

Moreover, the p-torsion subgroup scheme E\p] of an elUptic curve sits inside an 
extension 

© ^ ker(F) ^ E[p] ker(y) ^ 

(here, V : E^p^ — > E denotes Verschiebung), and is endowed with a bilinear, 
alternating and nondegenerate pairing, the Weil pairing. Due to this pairing, kernel 
and cokemel of ^ become Cartier dual group schemes. Hence we may ask 

Question (B). Given a field k of positive characteristic p, does every twisted form 
of fip © (X/pTj) over k that is endowed with a bilinear, alternating and nondegen- 
erate pairing occur as subgroup scheme of an elliptic curve over kl 

For perfect fields, the sequence ^ is split from which it follows that Question 
(A) and Question (B) are equivalent for these fields. Also, if already Question (A) 
has a negative answer for a field. Question (B) cannot have a positive answer. In 
view of our positive results we can only hope for local fields and fields of charac- 
teristic p < 11 to have a positive answer to Question (B): 

Theorem. If a field of positive characteristic p is 

(i) afield of the form k[{t)) where k is perfect, or 

(ii) ifp < 11, 

then Question (B) has a positive answer for this field. 

Finally, we answer the analogous questions for supersingular curves: if E is 
supersingular then ker(F) is a twisted form of Op, and E[p\ is a twisted form of 
M2. We refer to [O, Section II. 15.5] for the definition of this latter group scheme, 
which is the unique non-split extension of ap by itself that is autodual. On the 
other hand, we will see that neither Op nor M2 possess twisted forms over fields, 
whence ker(F) = Op and E[p] = M2 for every supersingular elliptic curve. 

This article is organised as follows: 

In Section [U we recall a couple of facts from [K-M] and ML-Sl about twisted 
forms of /ip, Hasse invariants and p-torsion subgroup schemes of ordinary elliptic 
curves. 

In Section|2]we use Weil's results on elliptic curves over finite fields and Honda- 
Tate theory ITa] to answer Questions (A) and (B) for finite fields. 

In Section [3] we use universal formal deformations of supersingular elliptic 
curves and a result of Igusa on the Hasse invariants of such deformations to get 
a positive answer to Question (A) for all fields of the form k{{t)). In particular, 
this gives a positive answer to Question (A) for local fields. Finally, we prove a 
Hasse principle for twisted forms over global fields using class field theory. 
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In Section|4]we first answer Question (A) positively for all fields of cliaracteristic 
p < 11 using explicit computations with Hasse invariants. Then we prove that 
Question (A) has a negative answer for the function field of in characteristic 
p > 13 and for function fields of elliptic curves in characteristic p > 17. This 
result is closely related to Igusa's result |Ig| that the Igusa curves lg{p) are not 
rational for p > 13 and of general type for p > 17. 

In Section|5]we show that Question (B) also has a positive answer for local fields 
and for fields of characteristic p < 11. 

Finally, in Section [6] we discuss kernel of Frobenius and the p-torsion subgroup 
scheme of supersingular elliptic curves over fields. 

1. Generalities 

In this section we recall a couple of facts concerning the kernel of Frobenius, 
Hasse invariants and p-torsion subgroup schemes of ordinary elliptic curves. For 
generalities about torsion subgroup schemes of elliptic curves we refer to IIK-Ml 
Chapter 8.7]. For supersingular elliptic curves, see Section |6]below. 

Let S" be a base scheme of characteristic p > and E be an elliptic curve over 
S. Then ker(F), the kernel of Frobenius F : E ^ E^p\ is a finite and fiat group 
scheme of length p over S. The p-hie algebra of ker(F) is a projective O^-module 
of rank 1 and thus coincides with the p-Lie algebra of E. 

We will now assume that S = Spec T is affine with Pic(r) = 0, e.g., T could 
be a field, a local ring or a polynomial ring over a field. In this case a sheaf of 
projective C'5-modules of rank 1 admits a global basis t E O5 identifying this 
module with T. Moreover, giving S the structure of a sheaf of p-Lie algebras is 
equivalent to prescribing the action of the p-operator on this basis, i.e., tt^l = At 
for some A G T. Note however, that we have chosen a basis for Os, which makes 
A only unique up to multiplication by elements of T^^p~^\ confer |Jac, Chapter 
V, Sections 7 and 8]. Under our assumptions on S, it follows from the Tate-Oort 
classification HT-Ol of group schemes of prime order that the p-Lie algebra of 
ker(F) determines ker(F) uniquely. 

We will now assume that E is an ordinary elliptic curve over S, which is equiv- 
alent to A G in our setup. Then ker(F) is a twisted form of fip over S. 
Since the automorphism group scheme Aut (^p) of /Xp is isomorphic to fip-i, 
twisted forms of /Xp are classified by Hl^^{S, jip-i). Using the Kummer sequence 
fJ-p-i — > Grrt —>■ Gm —>■ and our assumption Pic(T) = we deduce that 
the coboundary map in cohomology induces an isomorphism of groups 

Here we see directly that the p-Lie algebra determines the twisted form of //p 
uniquely. See also [ L-S. Section 1] for the preceding discussion. 

We recall from IIK-M[ Section 12.4] that the Hasse invariant of an elliptic 
curve is defined to be the linear mapping induced by the Verschiebung V on p- 
Lie algebras: h{E) = Ue{V) : Ue{E^P'^) Ue{E). Using the identifica- 
tion Ue{E^P^) = Ue{E)'^P, we may regard the Hasse invariant as an element 
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of the projective O^-module Lie{E)^^^ p\ which is of rank one. Choosing a ba- 
sis u G L[e{E), we can identify h{E) with X'u'^^^'P^ for some A' G T, which is 
unique up to (p — l).st powers. As carried out in ||L-S[ Section 3] the Hasse in- 
variant determines the p-Lie algebra of E up to isomorphism and conversely. More 
precisely, we have A' = by [L-S. Proposition 3.2]. In particular, Question (A) 
of the introduction is equivalent to 

Question (A'). Given a field k of positive characteristic p, does every element of 

fj-p-i) occur as Hasse invariant of an ordinary elliptic 

curve over fc? 

To describe the p- torsion subgroup scheme E[p] of an ordinary elliptic curve E 
over S, let us recall the setup of [L-S, Section 3]: this group scheme is a twisted 
form of G := /Xp © (Z/pZ). On E[p] there exists a a bilinear, alternating and non- 
degenerate pairing, the Weil pairing. This pairing makes the identity component 
ker(F) of E[p] the Cartier dual of the etale quotient ker(y) 

(1) ker(F) E[p] kei{V) 0. 

In particular, not every twisted form of G can occur as p-torsion subgroup scheme 
of an ordinary elliptic curve. However, on G we may define a bilinear, alternating 
and nondegenerate pairing by 

$ : G X G ^ /ip ^ 

and denote by ^ := Aut(G, the automorphism scheme of those automorphisms 
of G that respect <I>. Then E\p\ defines a cohomology class in H^{S,A). We can 
now reformulate Question (B) of the introduction: 

Question (B'). Given a field k of positive characteristic p, can every cohomology 
class in H^{Speck, A) be realised by the p-torsion subgroup scheme of an ordinary 
elliptic curve over kl 

In ML-Sl Section 2] we described A explicitly: it sits inside a split short exact 
sequence 

(2) 1 /xp_i ^ A ^ Hp ^ I. 

It turns out that A is not commutative for p > 5 and then nonabelian group coho- 
mology is needed to describe twisted forms of (G, <I>). Taking cohomology in Q 
induces a surjective homomorphism of pointed sets 

(3) H'^iS, A) ^ H'r{S, fip-i) ^ 1 

mapping the class of E[p] to the class of ker(F). Since A is nonabelian for p > 5, 
the description of the fibres of ([3]) is a little bit tricky. Roughly speaking, these 
fibres describe extension classes like the short exact sequence ([T]). We refer to 
llL^ Theorem 3.4] for details. 

The sequence ([T]) is just the connected-etale exact sequence for E[p] and it is 
well-known that such sequences split over perfect fields. In our case this can also 
be seen from Q, since its kernel H^{Spec k, fip) is trivial for perfect fields. More 
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generally, ([T]) splits if and only if j{E) G by HL-Sl Proposition 3.3]. In any case 
we note 

Remark 1.1. For a perfect field, Questions (A) and (B) are equivalent. 

2. Finite fields 

In this section we answer Questions (A) and (B) for finite fields. After classi- 
fying twisted forms over finite fields we use Weil's results about counting points 
of elliptic curves over finite fields and Honda-Tate theory flil to decide which 
twisted forms of fip over a finite field can be realised as subgroup schemes of el- 
liptic curves over this finite field. 

Proposition 2.1. Let k = Wg be the finite field with q = elements. Then there 
exists a bijection of sets and an isomorphism ip ofabelian groups 

{ twisted forms of over k} k^/k^^'^^'^^ ^ . 

In particular, there are precisely {p — 1) twisted forms of fip over k. 

Proof. We have seen in Section[T]that twisted forms of fip over k correspond bi- 
jectively to one-dimensional p-Lie algebras over k whose p-operator is non-trivial. 
There we have also seen that these p-Lie algebras correspond bijectively to the set 
k^/kMp~^)_ Finally, we leave it to the reader to check that 

(4) _i 

X x"^ with m = ^— r 

p-i 

defines an isomorphism of abelian groups. □ 

Theorem 2.2. Let k = Wq be the finite field with q = p^ elements and assume that 
p < n or n > 2. Then every twisted form of pLp over k occurs as subgroup scheme 
of an elliptic curve over k. In particular, Questions (A) and (B) have a positive 
answer for k. 

Theorem 2.3. Let Fp be a prime field with p > 19 elements. Then the set of twisted 
forms that occur as subgroup schemes of elliptic curves over Fp corresponds via 
the map (p of Proposition IZi] to the set 

{ e f; I /? G z - {0}, p^<Ap} c f; , 

which is a proper subset. In particular. Questions (A) and (B) have a negative 
answer for Fp. 

Proof (of both theorems). Since finite fields are perfect. Questions (A) 
and (B) are equivalent by Remark 11.11 By Proposition 12.11 there are no twisted 
forms of /ip in characteristic p = 2 and we may thus assume p > 3. 

Let E be an elliptic curve over the finite field k = ¥q with q = p" elements. 
Then the characteristic polynomial on the first £-adic cohomology group is of the 
form x'^ — /3x + q, where /? is an integer satisfying < 4q, confer [Sll Chapter V, 
Section 2]. By loc.cit. we also know that the number of /c -rational points on E is 
equal to 

#Eik) = 1- f3 + q. 
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Since p > 3 we may assume that E is given by an equation of the form = f{x). 
Denote by Apm the coefficient of x^™^^ in 

/(a;)(p'"-i)/2_ Then Ap is the Hasse 
invariant of E and its class in /k^^P^^^ corresponds to the twisted form ker(F) 
of fip as in Proposition 12.11 and as explained in Section [T] From the proof of lISil 
Theorem V.4.1] we get 

A, = AI+P+-+P"-' = = ^{Ap), 

where ip is as in (01). In particular, Ag lies in Fp. From loc.cit. we also get 

Aq = I - #E{k) mod p. 
Putting these results together, we infer 

P = 1 - #E{k) + q = Aq = ip{Ap) mod p, 

i.e., P mod p as an element of Fp determines ker(F) via the correspondence of 
Proposition 12.11 

Theorem 12.31 now follows: in fact, (5 is an integer fulfilling < Aq, and if 
q = p > 19 there are strictly less than p — 1 possibilities for (3. On the other hand, 
there are precisely p — 1 twisted forms of ^Up over Fp and hence not every one of 
them can be realised as kernel of Frobenius on an elliptic curve. 

Conversely, for /i G F^ and q = p^ with p<17orn>2 there exists an integer 
f3 with < Aq and P = h mod p. Now, Honda-Tate theory tells us that there 
exists an elliptic curve over k = ¥q with characteristic polynomial of Frobenius 
equal to x"^ — Px + q, confer This proves Theorem l2!2l □ 

Remark 2.4. The class [/?] = 1 E F^ corresponds to /ip and thus Honda-Tate 
theory shows moreover that there always exists an elliptic curve E over Fp with 
ker(F) ^ /ip and thus E[p] ^ /ip © (Z/pZ). 

Remark 2.5. From the description in Theorem 12.31 of those twisted forms of /ip 
that are realisable as subgroup schemes of elliptic curves it is not difficult to see 
that this subset usually does not form a subgroup. 

3. Local fields 

In this section we show that Question (A) has a positive answer for all fields of 
the form k{{t)) using deformation theory of elliptic curves and a result of Igusa. 
Also, we prove a Hasse principle for twisted forms of fip and classify these forms 
over local fields. 

Theorem 3.1. Let k be afield of positive characteristic p. Then every twisted form 
of fip over k{{t)) occurs as subgroup scheme of an elliptic curve over k{{t)). In 
particular, Question (A) has a positive answer for k{(t)). 

Proof. Choose a supersingular elliptic curve over Fp and let £ —>■ Fp[[t]] be its 
universal formal deformation. By a theorem of Igusa ([K-M' Corollary 12.4.4.]), 
the Hasse invariant of £ has simple zeroes, i.e., the Hasse invariant can be lifted to 
an element of Fp[[t]] of the form 

c-t- r(P-i) • (1 + tg{t)) 
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for some c € Fp , some n > and g{t) G Using the fact that the equation 

xP~^ — 1 has p — 1 different zeroes in Fp and using Hensel's lemma, it is easy to 
see that this Hasse invariant is congruent to c • t modulo Fp((t))^(P~^). 

Base changing from Fp to k and using then base changes of the form t ^ a-t"^ 
we can realise every class in k{{t))^ /k{{t))^^'P^^^ as Hasse invariant of an elliptic 
curve over k{{t)). □ 

Now, let K a global field of positive characteristic p, i.e., a finite extension of 
Fp(i). For a place v of K 'we. denote by the completion with respect to v. The 
next result shows that twisted forms of /ip over global fields obey a Hasse principle. 

Proposition 3.2 (Hasse principle). Let K be global field of positive characteristic 
p. Then the natural homomorphism 

HiiSpecK, ^p_i) JJi7]t(SpecKj,, /Xp_i) , 

V 

where the product is taken over all places ofK, is injective. In particular, a twisted 
form of lip over K is trivial if and only if it is trivial over every completion. 

Proof. The total space of a ;Up_i-torsor over Spec K is the spectrum of an Artin 
algebra over K, hence a product of fields L D K. If this torsor is non-trivial 
then L/K is a. non-trivial extension and due to the /ip_i -action this extension is 
a Galois extension with abelian Galois group. By class field theory there exists a 
place V of K such that the induced extension Ly/K^ on completions is non-trivial. 
This implies that the induced -torsor over Ky is non-trivial and our injectivity 
statement follows. □ 

Remark 3.3. Let K = k{{t)) for some field k of positive characteristic p. Using 
Hensel's lemma it is easy to see that the valuation v : — > Z induces a short 
exact sequence 

^ i^it(SpecA;,/ip_i) ^ ffit(Spec JC, A Z/(p - 1)Z ^ 0, 

which can be split using the uniformiser t e K. In particular, if ii' is a local field, 
i.e., if is a finite field F^, then applying Proposition 12 . 1 1 we obtain an isomorphism 

//?t(SpecF,((t)), ^p_i) ^ {'L/{p-l)'Ef. 

In particular, there are only finitely many twisted forms of /ip over local fields. 

4. IGUSA CURVES 

In this section we will first prove that Question (A) has a positive answer for all 
fields of positive characteristic p < 11. Then, however, we will see that Question 
(A) has a negative answer for the fields k{t) in characteristic p > 13 and for 
function fields of elliptic curves in characteristic p > 17. This result is closely 
related to the geometry of the Igusa curves. 

Theorem 4.1. Let k be a field of characteristic p < 11. Then every twisted form 
of fj,p over k occurs as subgroup scheme of an elliptic curve over k. In particular, 
Question (A) has a positive answer for k. 
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Proof. Since there are no twisted forms of /ip in characteristic 2, the result triv- 
ially holds true for p = 2. From the discussion in Section [U we know that Question 
(A) is equivalent to Question (A'), i.e., we have to realise every class in /k^^P~^^ 
as Hasse invariant of an elliptic curve over k. 

If p > 5 then every elliptic curve can be given by a WeierstraB equation of the 
form y"^ = + ax + b. Depending on p we obtain the following Hasse invariants: 



p 


5 


7 


11 


Hasse invariant 


2a 


36 


9ab 



Hence if 5 < p < 11 we can easily find for every class [h] G k^ /k^^P^^^ an 
elliptic curve with Hasse invariant [h] . 

We leave the case p = 3 to the reader. □ 

Remark 4.2. Of course, one can ask what freedom one has choosing the elliptic 
curve containing a given twisted form of /Xp as subgroup scheme. Using the auto- 
morphism groups of (special) elliptic curves to twist a given curve it follows from 
Lemma l44] below that 

p = 2 There are no twisted forms of ^2 over fields and every ordinary elliptic 

curve contains ^2 as subgroup scheme. 
p = 2> Given a twisted form /I3 of ^3 and an arbitrary ordinary elliptic curve E 

there exists a quadratic twist of E containing Jl^ as subgroup scheme. 
p = 5 Every twisted form of ^5 can be realised as subgroup scheme of an elliptic 

curve with j = 1728. 
p = 7 Every twisted form of fij can be realised as subgroup scheme of an elliptic 

curve with j = 0. 

In characteristic p = 11 there usually does not exist one single elliptic curve such 
that all twisted forms of fip occur as subgroup schemes of twists of this particular 
curve. 

We now come to the main result of this section, namely that in characteristic 
p > 13 Question (A) has a negative answer in general. As the proof will show 
this is closely related to the Igusa curves not being rational if p > 13. We re- 
call from HK-Ml Chapter 12.3] that the Igusa moduli problem classifies ordinary 
elliptic curves £ over base schemes S of positive characteristic p such that the 
Frobenius puUback S'^'p'^ contains an S'-rational p-division point. For p > 2> this 
moduli problem is representable by a smooth affine curve Ig(p)°'''^ over Fp, whose 
smooth compactification is denoted by Ig(p)°^'^. The geometry of these curves has 
been analysed in |lgj, and in particular their genera have been determined there: 

Proposition 4.3 (Igusa). Let Ig(p)™'^ be the smooth compactification of the Igusa 
curve in positive characteristic p > 3. Then this curve is 

(i) rational ifp < 11, is 

(ii) elliptic ifp= 13, and is 

(iii) of general type ifp > 17. □ 

Next, we determine the effect that twisting an elliptic curve has on its Hasse 
invariant. 
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Lemma 4.4. Let E be an ordinary elliptic curve over a field k of characteristic 
p>3 and let [h] G /k^^P~^^ be its Hasse invariant. 

(i) If is the quadratic twist of E with respect to D G k^ /k^"^ then the 
Hasse invariant of E^ is [/iD^P"^)/^]. 

(ii) If j{E) = (and thus p = 1 mod 3) and E^ is the sextic twist of E with 
respect to D £ k^ /k^^ then the Hasse invariant of E^ is 

(iii) If j{E) = 1728 (and thus p = 1 mod 4j and E^ is the quartic twist 
of E with respect to D £ k^/k^^ then the Hasse invariant of E^ is 

Proof. In characteristic p > 5 this can be seen from the explicit computation of 
twists in lISll Chapter X, Proposition 5.4] together with the description of the Hasse 
invariant as the coefficient of x^^^ in /(x)*^^"^)/^ if the elliptic curve is given by 
y'^ = f{x), see ISll Chapter V, Theorem 4.1]. We leave the case p = 3 to the 
reader. □ 

Theorem 4.5. Let k be afield of characteristic p > 13. Then there exists a twisted 
form of fip over k{t) that does not occur as subgroup scheme of an elliptic curve 
over k[t). In particular, Question (A) has a negative answer for k{t). 

Proof. Consider the field extension k{t) C L := k{t)[ which is Galois 

with cyclic Galois group of order p — I. Hence Spec L Spec k{t) is a /ip-i- 
torsor and we denote by Jlp be twisted form of fip, which arises by twisting fip with 
this torsor. Note that L = k{u) for u := ^~\/t, i.e., L is the function field of P^,. 

By way of contradiction, we assume that there exists an elliptic curve E over 
k{t) containing ptp as subgroup scheme. 

Suppose first that j{E) G k. Then there exists a twist E' of E, which is already 
defined over k. The corresponding twist Jlp is then also defined over k. If j{E) 
{0, 1728} then £" is a quadratic twist of E, see fSil Chapter X, Proposition 5.4]. 
Now, ]lp corresponds to the class [t\ G k{t)^ /k{t)^^P^^\ Since Jlp is obtained 
by a quadratic twist (still assuming j{E) {0, 1728} for the moment), say with 
twisting parameter D, the twisted form of Jlp corresponds to the class [tD^^^^^/^j 
by Lemma l4!4l Using k[t\ with its standard valuation v such that v{t) = 1, we see 
that for p > 5 and for all D G k{t)^ we have v{tD^P^^^/'^) / 0. In particular, 
the class of Jlp in k{t)^ /k(^t)^^P~^'> cannot be represented by an element of k, 
which implies that Jlp cannot be defined over k. If j{E) = or j{E) = 1728 we 
have to consider also sextic and quartic twists, but again, for p > 11, no sextic or 
quartic twist of Jlp can be defined over k. We conclude that j{E) k, i.e., j{E) is 
transcendental over k. 

Since Jlp becomes isomorphic to fip over L, we see that fip is a subgroup scheme 

(p) 

of El := E Xgpecfc(t) Spec L. This implies that Ej^ contains an L-rational p- 
division point and we obtain a classifying morphism ip : Spec L Ig(p)°'''^ to the 
Igusa curve, which yields a morphism (pk ■ Spec L —>■ Ig(p)°'"*^ XspecFp Spec k. 
There is a dominant morphism lg{p) —>■ induced by the j-invariant and using 
that j{E) is transcendental over k we infer that ipk is dominant. Since L is the 
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function field of P^, tlie existence of Lpk implies tiiat lg{p)°^'^ is a rational curve. 
This contradicts Proposition 14.31 and we conclude that the curve E we started with 
does not exist. □ 

Theorem 4.6. Let k be afield of characteristic p > 17 and E be an elliptic curve 
over k. Then there exists a twisted form of fip over the function field k{E) that 
does not occur as subgroup scheme of an elliptic curve over k{E). In particular, 
Question (A) has a negative answer for k{E). 

Proof. We consider the morphism E —>■ E, which is given by multiplication 
with p — I. This induces a field extension k{E) C k{E), which is Galois with 
group — 1)Z)^. In particular, there exists a subfield k{E) C L C k{E), 

such that L/k{E) is Galois with group Z/(p — 1)Z. Twisting p,p with the jip-i- 
torsor Spec L —>■ Spec k{E), we obtain a twisted form Jlp of p,p. We note that L is 
the function field of an elliptic curve over k, which is in particular a geometrically 
irreducible curve over k. 

Assume there exists an elliptic curve X over k{E) containing Jlp as subgroup 
scheme. 

As in the proof of Theorem l4.5l one first shows that j{X) k. Otherwise there 
exists a quadratic (resp. quartic, resp. sextic) twist Jlp of Jlp, which is defined over 
k, which implies that the extension L/k{E) is given by taking the {p — l).st root 
of an element of the form aZ)"* with m = (p — l)/2 (resp. m = {p — l)/4, resp. 
m = (p — l)/6) and a ^ k. However, this implies that L is the function field of a 
curve over k, which is not geometrically irreducible, a contradiction. 

From j{X) k, we infer again that Spec L maps dominantly to Ig(p), and 
using similar arguments as in the proof of Theorem 14. 5 1 we conclude that lg{p)™'^ 
has genus at most one, which contradicts Proposition 14. 3 1 □ 

If we choose A; to be a finite field in the previous two theorems, then we obtain 
examples of global fields K over which there exist a twisted form Jlp of /ip that 
cannot be realised as subgroup scheme of an elliptic curve over K. On the other 
hand, Theorem l3.1l tells us that for every place voiK the group scheme Jlp x spec k 
Spec over the completion can be realised as subgroup of an elliptic curve 
over Ky. Thus, although there exists a Hasse principle for twisted forms over 
global fields by Proposition [3i2j we note: 

Corollary 4.7 (no Hasse principle). Let K be the function field o/P^ over a finite 
field of characteristic p > 13 or the function field of an elliptic curve over a finite 
field of characteristic p > 17. Then there is no Hasse principle for realising twisted 
forms of fXp over K as subgroup schemes of elliptic curves. □ 

In view of the negative results Theorem 14.51 and Theorem 14.61 one can ask 
whether one can realise more twisted forms of /ip by also allowing singular or 
nonproper curves carrying group structures rather than only elliptic curves. This 
turns out not to help: 

If we do not insist on propemess (but on geometric integrality), we are led 
to considering twisted forms of Gm. If we do not insist on smoothness (but on 
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geometric integrality) then we are led to considering projective curves C with 
/i^(C, Oc) = 1 and having one singularity. The smooth locus of C is a twisted 
form of Gm if the singularity is a node and a twisted form of Ga if the singularity 
is a cusp. Thus, we find twisted forms of /Xp also on nodal curves. 

However, the group scheme of automorphisms of Gm fixing the neutral element 
is Z/2Z generated hy t ^ t^^ . Thus, on twisted forms of nodal projective curves 
or on twisted forms of Gm we can only realise quadratic twists of jip. Using 
quadratic twists of an elliptic curve E containing /ip as subgroup scheme, which 
always exists by Remark [2!4l we see that all quadratic twists of Hp can be realised 
as subgroup schemes of elliptic curves. Thus we have shown 

Proposition 4.8. Let k be field of positive characteristic p. Then every twisted 
form of that occurs on a twisted form ofGm or on a twisted form of the singular 
nodal curve of arithmetic genus one can also be realised as subgroup scheme of an 
elliptic curve over k. □ 

5. The p-TORSiON subgroup scheme 

We have seen in the previous sections that Question (A) has a positive answer 
for local fields (Theorem 13.11) . as well as for all fields of characteristic p < 11 
(Theorem 14.11 ). We will see in this section that for those fields also Question (B) 
has a positive answer. 

We need two technical lemmas to start with. 

Lemma 5.1. Let G := ^Xp® (Z/pZ), ^ : G x G ^ pp and A = Aut(G, <i>) as in 
SectionUl Let k be afield of positive characteristic p and let Spec L — > Spec k be 
an A-torsor Then 

(i) as a k-algebra L is isomorphic to k[x,y]/{x^ — a,y^~^ — b) for some 
elements a,b £ k. 

(ii) as a scheme the twist {G, A"^ Spec L is isomorphic to the spectrum of 
k®k[y]/{yP-^ -b)®L. 

Moreover, a p^ -dimensional k-algebra can carry at most one structure of a Hopf 
algebra making its spectrum into a twisted form of {G, 

Proof. We have seen in Section[T]that A = xi /ip. Taking ^p_i -invariants 
we can factor Spec L Spec k as k C k' := k[x]/{x^ — a) for some a £ k 
and then L = k'[z\/{zP~^ — c) for some c G k' . But then b := lies in k and 
thus k[x, y]/(x^ — a, y^~^ — b) is contained in L. Comparing their dimensions as 
/c- vector spaces they must be equal and we get the first assertion. 

The action of ^ on G is described in HL-Sl Section 2]. This action has three 
orbits: one orbit consists of Spec k (corresponding to the zero section), one orbit 
has length (p — 1) (corresponding to Z/pZ minus the zero section) with infinites- 
imal isotropy groups, and finally one orbit has length p{p — 1) upon which A acts 
without fixed scheme. From this we get the second assertion. 

Finally, we note that every twisted form of (G, is autodual, i.e., isomorphic 
to its own Cartier dual. Now, the coalgebra structure of a commutative and cocom- 
mutative Hopf algebra is determined by its algebra structure, confer ||Wl Section 
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2.4]. Hence a A;-algebra can carry at most one structure of a Hopf algebra making 
its spectrum into a twisted form of (G, □ 

Lemma 5.2. Let E be an elliptic curve over a field of positive characteristic p 
with Hasse invariant [h] G /k^^P^^^ and j -invariant j{E). Then, as a scheme 
the p-torsion subgroup scheme E[p] is isomorphic to the spectrum of k ® M ® L, 
where M = k[y\/{yP-^ - h) and L = M[x]/(xP - j{E)). 

Proof. As a scheme, the twisted form ker(y) of Z/pZ, which is nothing but 
the etale quotient of E\p\ (compare with ([T])) is isomorphic to the spectrum of 
k © k[y\/{yP~^ — h). These two summands corespond to the two ^-orbits of 
length 1 and p — \ that we have seen in the proof of Lemma [STTl 

To determine the third summand, we may assume j{E) for otherwise 
E\p] is the direct sum of ker(F) and its Cartier dual and the result is true in this 
case. We note that E[p] becomes isomorphic to fip © {'E/p'L) over k[x,y\/{x'^ — 
j{E),yP~^ — h). From this it follows easily that k[y\/{y'P — j{E)) is contained in 
this third summand, which implies that it contains k[x, y]/ {x^ — j{E), y^"^ — h). 
Since this latter A;-algebra is 1) -dimensional like the summand we are looking 
for, they have to coincide. □ 

To answer Question (B) and to avoid trivialities, we may assume by Remark fTTT] 
that the field we are dealing with is not perfect. 

Proposition 5.3. Let k be a nonperfect field of characteristic p. Then Question 
(B) has a positive answer for k if for every [h] € k^ /k^^~^^ and every purely 
inseparable field extension k C k' of degree p, there exists an elliptic curve E over 
k with Hasse invariant [h] and j -invariant j{E) such that k' = k[^/j(E)]. 

Proof. Let G be a twisted form of (G, <&) over k. By Lemma [5TT] there exist 
a,b ^ k such that the scheme underlying G is isomorphic to the spectrum of 
k®M®L, where M = k[y] / {y^-^ - b) and L = M[x]/{xP -a). By Lemma[5^ 
and our assumptions there exists an elliptic curve E over k such that the scheme 
underlying E[p\ also is isomorphic to the spectrum of A; © M © L. But then, 
again by Lemma [5?T1 the two schemes G and E[p\ are also isomorphic as group 
schemes. □ 

Theorem 5.4. Let k be afield of positive characteristic p <11. Then every twisted 
form of pp® {1^/p1?j endowed with a bilinear, alternating and nondegenerate pair- 
ing can be realised as subgroup scheme of an elliptic curve over k. In particular. 
Question (B) has a positive answer for k. 

Proof. By Theorem 14. 1 1 and Remark [TTT] we may assume that k is not perfect. 
Given a purely inseparable field extension k C k' of degree p, there exists an 
element j ^ k such that k' = k[^/J\. Then we choose an elliptic curve E over k 
with = j. 

By Proposition 15.31 it remains to realise all possible Hasse invariants on such 
curves. In characteristic p = 2 there is only the Hasse invariant h = [1] and we 
get our result in this characteristic. In characteristic p = 3 we can use quadratic 
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twists of this curve E to realise every possible Hasse invariant (see Remark 14.21) 
and since twisting does not change the j-invariant, we also get our result in this 
characteristic. 

In characteristic p = 5 we may assume that elliptic curves are given by a Weier- 
straB equation of the form y'^ = + ax + b. The Hasse invariant of such a curve 
is [2a] G /k^^P~^^ (see also the proof of Theorem 14. II ) and we can realise every 
class of /k^^~^^ by the Hasse invariant of an elliptic curve. Replacing a by 

does not change the Hasse invariant. But then a straight forward computation 
shows that k [ ^j{E)] coincides with k [ ^] . Choosing thus a and b appropriately, 
we see that the assumptions of Proposition 15.31 are fulfilled and our statement fol- 
lows for characteristic 5. 

The remaining cases p = 7 and p = 11 are similar top = 5 and therefore left to 
the reader. □ 

Theorem 5.5. Let k be a perfect field of positive characteristic p. Then every 
twisted form of Hp © (Z/pZ) endowed with a bilinear, alternating and nondegen- 
erate pairing can be realised as subgroup scheme of an elliptic curve over k{{t)). 
In particular, Question (B) has a positive answer for k{{t)). 

Proof. By Theorem [TTl given a class in k{{t))^ /k{{t))^^P^^^ there exists an 
elliptic curve E over k{{t)) having this class as Hasse invariant. Moreover, looking 
at the proof of this result we see that we may assume that this elliptic curve has a 
j-invariant that does not lie in k. If j{E) lies in k{{t)Y then there exists an elliptic 
curve E' over k{{t)) such that E = E'^p\ It is easy to see that the Hasse invariants 
of E and E' coincide. We may thus assume that we have realised the given Hasse 
invariant on an elUptic curve E with j{E) k{{t)y. Since there is only one 
inseparable extension K' of k{{t)) of degree p (here we use that k is perfect), we 
must have K' = k{{t))[^j{E)]. Applying Proposition 15. 3l our result follows. □ 

6. SUPERSINGULAR ELLIPTIC CURVES 

Finally, we describe p-torsion subgroup schemes of supersingular elliptic curves, 
which turn out to be much simpler than those of ordinary elliptic curves. 

The kernel of Frobenius of a supersingular elliptic curve is a twisted form of 
Up. Since Aut(ap) = Ga is a smooth group scheme, Op does not possess twisted 
forms over fields by Hilbert 90. 

Over perfect fields, there exists only one non-split extension of Op by itself that 
is autodual, namely M2 in the notation of [O, Section II. 15.5] 

(5) ^ Up ^ M2 ^ Op ^ 0. 

Hence the p-torsion subgroup scheme of a supersingular elliptic curve is a twisted 
form of M2. In particular, M2 plays the role that fip © (Z/pZ) plays for ordi- 
nary elliptic curves. Since Op does not possess twisted forms over fields, twisted 
forms of M2 correspond to twisted splittings of ([5]), which are parametrised by 
H^{Spec k, Hom fap. Op)), confer |D-G, Chapter III.§6.3.5]. On the other hand, 
Hom fgp, Up) = Ga is a smooth group scheme, and hence this cohomology group 
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is trivial for fields by Hilbert 90. We deduce that M2 does not possess twisted 
forms over fields. 

We have thus shown that the questions analogous to Questions (A) and (B) triv- 
ially hold true for supersingular elliptic curves: 

Theorem 6.1. Let k be afield of positive characteristic p. 

(i) The kernel of Frobenius of a supersingular elliptic curve over k is isomor- 
phic to ap. The group scheme ap does not possess twisted forms over k. 

(ii) The p-torsion subgroup scheme of a supersingular elliptic curve over k is 
isomorphic to M2. The group scheme M2 does not possess twisted forms 
over k. 
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